$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1544ABCCDCFD11EDBA63C734C4F9AE02.roa File: 1544ABCCDCFD11EDBA63C734C4F9AE02.roa (raw, json) Hash identifier: 4QmM6+pyPPt/CV3PzvBB0Y6yxtUVwqAX/Dt3Rd4gzMY= Subject key identifier: 03:26:64:16:8B:EF:CB:65:83:0D:A0:D4:E3:80:A7:76:12:58:DB:93 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7116 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1544ABCCDCFD11EDBA63C734C4F9AE02.roa Signing time: Wed 10 May 2023 16:46:33 +0000 ROA not before: Wed 10 May 2023 16:46:33 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150603 IP address blocks: 103.98.2.0/24 maxlen: 24 103.98.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28950 (0x7116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:46:33 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca69-4485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:54:1c:93:fe:1c:d5:e8:d8:c3:19:ac:39: ea:c5:95:c1:73:49:3c:78:31:fd:e6:49:6d:c9:78: fc:9e:6e:e3:46:4f:28:2b:c2:20:bc:55:ef:9c:6b: 64:0a:a6:e1:fb:80:57:8c:1d:78:c7:76:78:02:65: 39:fb:65:21:5e:4e:4d:21:85:a8:c2:76:16:78:d8: 00:af:e2:f7:27:3c:5d:08:ae:c2:53:5e:fd:cd:a1: cc:38:87:51:d2:15:1e:ca:ee:52:8f:07:d0:fa:e5: 2c:69:20:cd:7e:98:b5:9c:ea:f3:f5:fb:3c:f0:b0: 34:49:e5:70:59:a3:4f:a2:41:fc:31:70:40:16:bd: 51:3e:1a:4a:62:eb:03:d5:d7:45:e1:f8:16:2e:6b: fe:db:78:cf:11:6a:46:e9:38:51:f0:0c:b6:62:25: a1:2b:6a:e2:d7:89:d7:c4:a3:74:bc:0a:46:42:bd: d9:c1:f1:e8:7e:9a:7e:83:d7:5f:07:3e:10:31:68: bf:70:96:cb:5a:55:8f:7b:19:e9:d8:98:36:d7:0c: 5c:3b:8d:01:3e:3c:b8:2e:14:15:9e:2d:4c:32:69: 73:79:d9:43:02:fe:e0:8f:34:44:a1:ba:26:46:23: fc:91:f4:f6:14:09:38:dd:8c:9b:e0:8a:39:1e:88: fd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:26:64:16:8B:EF:CB:65:83:0D:A0:D4:E3:80:A7:76:12:58:DB:93 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1544ABCCDCFD11EDBA63C734C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.2.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:d3:e9:be:03:b6:4b:b9:44:b3:ca:54:2b:30:9e:57:59:65: 71:ef:42:d3:92:dc:23:34:02:dd:cd:0d:39:a1:3f:b8:ed:c3: 2f:c4:23:79:cf:fa:f3:dd:c8:b6:9f:82:19:e1:e4:5a:34:f6: a6:6f:4d:0a:7d:50:62:00:26:c6:ad:0e:27:ee:c0:79:7b:1a: 09:53:7d:c4:bc:e5:76:f7:d1:42:19:80:ee:ac:ce:39:63:eb: b0:d4:ec:67:0c:82:bc:c5:25:03:df:9f:39:70:18:c7:1d:d4: 14:c5:96:13:97:ca:a9:e3:3b:54:bf:d2:76:ca:e3:0d:78:31: a1:fa:bd:8f:08:5f:b5:69:8d:ed:ce:fb:c1:95:b3:5e:94:da: d5:41:e9:05:de:6d:b8:e3:b4:7e:9a:7f:0e:2f:05:fc:30:53: a7:fb:82:a7:68:87:ad:1c:2c:93:d6:36:e4:cd:e7:9f:a6:f4: e6:8f:1f:14:9a:10:6b:54:97:f1:fa:4f:5e:d4:cf:9a:6a:ca: 2d:a4:19:e7:b0:21:d0:f6:10:ea:aa:2a:70:ba:76:80:e5:4b: 9e:09:8a:56:40:00:05:44:8a:8d:74:8b:59:b4:c4:2b:2c:63: 09:d2:3b:bd:d6:39:2b:41:20:4c:67:ba:13:40:e5:f0:6b:f4: 29:ec:92:af -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NjMzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2E2OS00NDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAul9UHJP+HNXo2MMZrDnqxZXBc0k8eDH95kltyXj8nm7jRk8oK8IgvFXvnGtk Cqbh+4BXjB14x3Z4AmU5+2UhXk5NIYWownYWeNgAr+L3JzxdCK7CU179zaHMOIdR 0hUeyu5SjwfQ+uUsaSDNfpi1nOrz9fs88LA0SeVwWaNPokH8MXBAFr1RPhpKYusD 1ddF4fgWLmv+23jPEWpG6ThR8Ay2YiWhK2ri14nXxKN0vApGQr3ZwfHofpp+g9df Bz4QMWi/cJbLWlWPexnp2Jg21wxcO40BPjy4LhQVni1MMmlzedlDAv7gjzREobom RiP8kfT2FAk43Yyb4Io5Hoj91wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAMmZBaL 78tlgw2g1OOAp3YSWNuTMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTU0NEFCQ0NE Q0ZEMTFFREJBNjNDNzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnYgIwDQYJKoZIhvcNAQELBQADggEBAFrT6b4Dtku5RLPK VCswnldZZXHvQtOS3CM0At3NDTmhP7jtwy/EI3nP+vPdyLafghnh5Fo09qZvTQp9 UGIAJsatDifuwHl7GglTfcS85Xb30UIZgO6szjlj67DU7GcMgrzFJQPfnzlwGMcd 1BTFlhOXyqnjO1S/0nbK4w14MaH6vY8IX7Vpje3O+8GVs16U2tVB6QXebbjjtH6a fw4vBfwwU6f7gqdoh60cLJPWNuTN55+m9OaPHxSaEGtUl/H6T17Uz5pqyi2kGeew IdD2EOqqKnC6doDlS54JilZAAAVEio10i1m0xCssYwnSO73WOStBIExnuhNA5fBr 9Cnskq8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org